History log of /system/security/
Revision Date Author Comments (<<< Hide modified files) (Show modified files >>>)
cd8df62842b81c93022feabfacda8efd257e1754 20-Aug-2012 Kenny Root <kroot@google.com> am 878c359d: Merge "Add getmtime command for keys"

* commit '878c359db8ecac6390592f7f3de19c77f28113a2':
Add getmtime command for keys
878c359db8ecac6390592f7f3de19c77f28113a2 20-Aug-2012 Kenny Root <kroot@google.com> Merge "Add getmtime command for keys"
344e0bc23ca46b9acec97ac8bcd87949bde0ccab 15-Aug-2012 Kenny Root <kroot@google.com> Add getmtime command for keys

This allows you to check when a key was last modified.

Change-Id: I167844d9a50e26aadfc73a2252b937d2ef09f09d
eystore/keystore.cpp
eystore/keystore.h
d3c598c12c1317f592b8da19e00c8122dba6b0c1 16-Aug-2012 Kenny Root <kroot@google.com> am e7f9da44: Merge "Clear out ENGINE flags when initializing"

* commit 'e7f9da44646b8eb66ef2e7b163176b5272216e86':
Clear out ENGINE flags when initializing
e7f9da44646b8eb66ef2e7b163176b5272216e86 16-Aug-2012 Kenny Root <kroot@google.com> Merge "Clear out ENGINE flags when initializing"
938a991106a9bd064eb2ede1fb46d9c2ef94c1be 16-Aug-2012 Kenny Root <kroot@google.com> Clear out ENGINE flags when initializing

We don't need our engine to be copied when initialized with
ENGINE_by_id, so just make sure our flags are cleared when we
initialize.

Change-Id: Ie75fad37c2f78a769c425889c1d0661b468cd0c7
eystore-engine/eng_keystore.cpp
65c1af4a3cbdbe11b17f57c7e47dc2848a5851e3 14-Aug-2012 Kenny Root <kroot@google.com> am 593786c9: Merge "keymaster HAL users don\'t need delete_keypair"

* commit '593786c9b885a48a2674e3ebb5c3bab265de2e51':
keymaster HAL users don't need delete_keypair
593786c9b885a48a2674e3ebb5c3bab265de2e51 14-Aug-2012 Kenny Root <kroot@google.com> Merge "keymaster HAL users don't need delete_keypair"
9a53d3eaf42104ddf02feeccec3cf7f5c1a34bae 14-Aug-2012 Kenny Root <kroot@google.com> keymaster HAL users don't need delete_keypair

The keymaster HAL implementations don't need the delete_keypair method,
but keystore currently throws an error when it's not implemented. This
causes problems with at least the OpenSSL software implementation.

Bug: 6985351
Change-Id: I3d7f7dce2a6d4aad38c20f555ab16aa45f1823b8
eystore/keystore.cpp
3fff02b4f6c16df61ae89c4c02008a08dbcf5250 27-Jul-2012 The Android Open Source Project <initial-contribution@android.com> Reconcile with jb-release

Change-Id: Ic25a71c0dcde3cda15caaafd93004f477671db24
e9478a07d7c3793aae26c1cef85b6c1f02dd42f5 25-Jul-2012 The Android Automerger <android-build@android.com> merge in jb-release history after reset to jb-dev
81a4e0fe5bc012975706047f42aeabe24658f95c 19-Jul-2012 Brian Carlstrom <bdc@google.com> am aa8467e5: Merge "Handle keynames with special characters such as - and ."

* commit 'aa8467e59b561f454ff7ec902aae688145d8d297':
Handle keynames with special characters such as - and .
aa8467e59b561f454ff7ec902aae688145d8d297 19-Jul-2012 Brian Carlstrom <bdc@google.com> Merge "Handle keynames with special characters such as - and ."
a8c703d9fdd98e3caefb6e74cd03c2878cecd0a1 17-Jul-2012 Brian Carlstrom <bdc@google.com> Handle keynames with special characters such as - and .

Bug: http://code.google.com/p/android/issues/detail?id=34577
Bug: 6837950

(cherry-picked from 0114bd9f9bbc2458ca77bf3508e7c15992a432b1)

Change-Id: I0c265fe73c1b2c430ffd196a21691264f8f3b555
eystore-engine/eng_keystore.cpp
eystore/keystore.cpp
0114bd9f9bbc2458ca77bf3508e7c15992a432b1 17-Jul-2012 Brian Carlstrom <bdc@google.com> Handle keynames with special characters such as - and .

Bug: http://code.google.com/p/android/issues/detail?id=34577
Bug: 6837950

Change-Id: Id441e341073558ab8b20144a7e7f4f7a92c6a19e
eystore-engine/eng_keystore.cpp
eystore/keystore.cpp
c0ff10d48be65cbf498636539316cc378b1c9424 17-May-2012 Kenny Root <kroot@google.com> Make sure delete_all function pointer is NULL

The peril of not using calloc mean delete_all is not initialized until
we explcitly set it. Explicitly set delete_all to NULL to avoid that.

Change-Id: Ic370453e6142c6d1b2566df9844b4fac4bc53042
oftkeymaster/keymaster_openssl.cpp
bef8083783df4b06972f33b468eccf941e335864 03-May-2012 Kenny Root <kroot@google.com> Only initialize ex_data if not already

ENGINE_by_id will load up multiple copies of the engine which will
create a new ex_data index each time it's called. This change makes sure
the ex_data index is only initialized once.

Change-Id: I5e197faf6273ec3b3cafcbeadf7da8ec04a4f50b
eystore-engine/eng_keystore.cpp
e95ce35d10d6e0a7315a57f30d9c88d89880a4e1 07-Apr-2012 Amith Yamasani <yamasani@google.com> Allow calls from secondary user Settings app.

This is so that Face Unlock can be a valid option for a lockscreen.
Otherwise get a PERMISSION_DENIED when uid = 101000.

Change-Id: I0085b27dbd4d2f1988ba654acadd72c30f76a47e
eystore/keystore.cpp
da1ed9ab99c00698af64ec655ff668efffe2960d 10-Apr-2012 Kenny Root <kroot@google.com> Turn on extra compiler checks

Turn on the compiler flags -Wall -Wextra -Werror to make sure no
compiler warnings are added to the project.

Eliminate all unused arguments. Remove unused variables in code.

Change-Id: I0940ba897ac716b4a256f94fcd671f1ff5abc62c
eystore/Android.mk
eystore/keystore.cpp
98c2f8fcc1263a9d94adac66994fffc96c0df699 28-Mar-2012 Colin Cross <ccross@android.com> use UniquePtr.h from frameworks/native

Use the UniquePtr.h include from frameworks/native/include/utils
to fix the pdk build.

Change-Id: Ic415b43d2eb8c0b7ef54b6f3f75b7fa0d5f7a058
eystore-engine/Android.mk
eystore-engine/eng_keystore.cpp
oftkeymaster/Android.mk
oftkeymaster/keymaster_openssl.cpp
822c3a99d930e9299e2fad2fb3e0ff91b119b95a 24-Mar-2012 Kenny Root <kroot@google.com> Add support for upgrading key types

Old key types were not distinguished by the keystore itself. This change
takes some of the reserved fields in the old format and changes it to a
version number and key type.

Change-Id: I45bd4cdce042617641fe7bd742bbe26da6024996
eystore/Android.mk
eystore/keyblob_utils.cpp
eystore/keystore.cpp
eystore/keystore.h
oftkeymaster/Android.mk
oftkeymaster/keymaster_openssl.cpp
298e7b1b0f9116e2054d594d7538379d86585035 26-Mar-2012 Kenny Root <kroot@google.com> Add keymaster delete_all call on reset

To allow efficient deletion by hardware keymaster modules, add a direct
delete_all call when keystore is reset. This will also probably fix
problems where the hardware keymaster gets more keys than keystore knows
about and fills up its storage.

Change-Id: I452e2e609802201dc7db2f52f95b44d72f79efa2
eystore/keystore.cpp
70e3a86abd2c412d602a018967c01c177eb6cf4e 16-Feb-2012 Kenny Root <kroot@google.com> Add keymaster to keystore with soft implementation

Add hardware crypto capabilities to keystore. This allows hardware
escrow of private key material.

There is also an OpenSSL engine that connects to keystore to allow use
of the keystore keys from native code built into the platform.

This includes a software implementation of keymaster using OpenSSL
as the backend. This is just as insecure as the previous solution,
but it's needed so devices without hardware support can continue
to operate in the new scheme without a lot of compatibility code.

Change-Id: I2bc67766e1f633ef1cbbd2874a65962074e84f4f
eystore-engine/Android.mk
eystore-engine/eng_keystore.cpp
eystore/Android.mk
eystore/keystore.cpp
eystore/keystore.h
oftkeymaster/Android.mk
oftkeymaster/keymaster_openssl.cpp
5187818895c4c5f650a611c40531b1dff7764c18 13-Mar-2012 Kenny Root <kroot@google.com> keystore_client shared library

Add a libkeystore_client.so library for clients to use.

Add const-correctness to the keystore.cpp classes.

Increase maximum arguments for future work.

Change-Id: Ia22f8b893aea3115a7b4a0543ad392c17c8528f2
eystore/Android.mk
eystore/keystore.cpp
eystore/keystore.h
eystore/keystore_client.cpp
eystore/keystore_client.h
a91203b08350b2fc7efda5b1eab39e7541476b3a 16-Feb-2012 Kenny Root <kroot@google.com> Move keystore from frameworks/base

Move keystore from frameworks/base at commit
57ff581bd9b16a192a567f84d0e0a5c82d866343

Change-Id: I1e62488d63810f14e40ffb3d192925ff4eeb8906
eystore/Android.mk
eystore/keystore.cpp
eystore/keystore.h
eystore/keystore_cli.cpp
eystore/keystore_get.h
eystore/test-keystore
984d6fa91345087eb50af3829f6d1ff20db8c7bf 15-Feb-2012 Anatol Pomazau <anatol@google.com>